gp333 Privacy Policy — How We Collect, Use & Protect Your Personal Data

Section 01

Data We Collect

When you register for an account, use the gp333 platform, or interact with our support team, gp333 collects personal data that falls into the following categories. In each case, collection is limited to what is genuinely necessary for the stated purpose. We do not collect special-category sensitive data (such as biometric data, health records, or political opinions) and have no legitimate basis for doing so.

1.1 Registration & Identity Data

When you create a gp333 account, you are required to provide the following information: your full legal name, date of birth, a valid email address, a Bangladesh-registered mobile number, and a residential address within Bangladesh. This data is collected to establish your identity, verify that you meet the 18+ age requirement, and enable us to communicate with you about your account. Providing false or inaccurate registration data is a breach of the gp333 Terms & Conditions.

1.2 Know Your Customer (KYC) Documents

Before your first withdrawal is approved, gp333 is required under its anti-money laundering obligations to verify your identity via government-issued documentation. Acceptable documents include a Bangladesh National Identity Card (NID), a valid passport, or a Bangladesh driving licence. Where source-of-funds verification is required, we may also request bank statements or mobile financial service (MFS) transaction records. KYC documents are stored securely and accessed only by authorised compliance personnel.

1.3 Financial & Transaction Data

gp333 records details of every deposit and withdrawal you make, including the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), the transaction amount in BDT, the timestamp, and the transaction reference number assigned by the payment service provider. We do not store full payment credentials such as bKash PINs or bank account passwords — these are entered directly into the payment provider's secure interface and never transmitted to gp333.

1.4 Gaming & Betting Activity Data

A complete record of your gaming and betting activity on gp333 is maintained, including games played, stake amounts, outcomes, session duration, and bonus usage. This data is essential for the operation of the platform, for the resolution of game disputes, for bonus eligibility checks, and for identifying patterns that may indicate problem gambling behaviour so that responsible gaming interventions can be offered promptly.

1.5 Technical & Device Data

When you access gp333.club, our servers automatically log certain technical information including your IP address, browser type and version, operating system, device type (mobile, tablet, or desktop), screen resolution, referring URL, and the pages of gp333.club you visit during each session. This data is used to maintain platform performance, detect suspicious access patterns, and improve the user experience across different devices commonly used by players in Bangladesh.

1.6 Communications Data

If you contact gp333 via live chat, email at [email protected], or WhatsApp support, the content of that communication is stored as part of your account record. This includes support tickets, complaint submissions, and any documentation you send to the support team. Communications data is retained for a minimum of five years to support dispute resolution and regulatory compliance.

Section 02

How We Use Your Data

gp333 processes your personal data only where a lawful basis for doing so exists. The lawful bases we rely upon are: (a) performance of a contract — processing that is necessary to provide you with the services you have signed up for; (b) legal obligation — processing required to comply with our anti-money laundering, age verification, and record-keeping obligations; and (c) legitimate interests — processing for fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your rights.

2.1 Account Management

Your registration and identity data is used to create and maintain your gp333 account, authenticate your login sessions, apply account-level settings and preferences, enforce the one-account-per-player policy, and communicate important account notices such as security alerts, withdrawal confirmations, and policy updates.

2.2 Payment Processing

Transaction data is used to process your deposits and withdrawals accurately, to match incoming payments from bKash, Nagad, Rocket, or Upay to your account balance in real time, and to maintain a full audit trail of your financial activity on gp333. This data is also used to comply with our anti-money laundering obligations, including filing reports where required by applicable law.

2.3 Responsible Gaming Monitoring

gp333 uses your gaming activity data — including betting patterns, session lengths, and deposit frequency — to monitor for signs of potentially harmful gambling behaviour. Where our systems flag a concern, a responsible gaming specialist may review the data and, if appropriate, proactively offer tools such as deposit limits, session reminders, or cooling-off periods. This processing is carried out in your best interests and forms a core part of gp333's duty of care to all players.

2.4 Fraud Prevention & Platform Security

Technical and device data, combined with your transaction and gaming history, is analysed by gp333's fraud prevention systems to detect and prevent multi-accounting, bonus abuse, payment fraud, money laundering, and unauthorised access attempts. Where a security threat is identified, gp333 may suspend account access pending investigation without prior notice.

2.5 Promotional Communications

With your consent at registration, gp333 may send you promotional communications about new games, seasonal offers (such as BPL cricket promotions, Eid bonuses, or Pohela Boishakh special events), and personalised bonus offers based on your gaming preferences. You may withdraw consent for promotional communications at any time by contacting [email protected] or by updating your notification preferences in your account settings. Withdrawal of marketing consent does not affect the lawfulness of processing that took place before withdrawal.

2.6 Platform Improvement

Aggregated and anonymised technical data is used to analyse platform performance, identify and resolve bugs, improve page load speeds for players connecting from Dhaka, Chittagong, Sylhet, and other locations across Bangladesh, and to develop new features and game categories that meet the preferences of our player community.

Section 03

Data Sharing & Disclosure

gp333 does not sell your personal data. We do not share it with third-party advertisers, data brokers, or any entity whose purpose is the commercial exploitation of personal information. Sharing of your data is limited to the categories of recipient described in this section, and in each case is subject to appropriate contractual safeguards.

3.1 Payment Service Providers

To process your deposits and withdrawals, gp333 shares the minimum necessary transaction data with your chosen payment service provider — bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, City Bank, BRAC Bank, Islami Bank, or Sonali Bank. The data shared is limited to the transaction amount, your registered mobile number or bank account reference, and the gp333 transaction reference. Each payment provider operates under its own privacy policy and data protection obligations.

3.2 Game Software Providers

gp333 licenses its casino games from reputable third-party software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. In order to deliver live dealer games, slot titles, and crash games to your device, a session token and anonymised player identifier may be passed to the relevant game provider's servers. Full personal identity data (name, address, NID) is never shared with game providers.

3.3 Legal & Regulatory Disclosure

gp333 may be required by law or by a competent authority to disclose personal data without your consent. Circumstances in which such disclosure may occur include: a valid legal order from a court or regulatory body; a request from a law enforcement agency investigating financial crime, fraud, or money laundering; or where disclosure is necessary to protect the vital interests of another person. gp333 will notify you of any disclosure request where it is legally permitted to do so.

3.4 Technology Infrastructure Partners

gp333 uses third-party technology providers for services including cloud hosting, database management, email delivery, and security monitoring. These providers act as data processors on gp333's behalf and are contractually prohibited from processing your data for any purpose other than delivering the specific service for which they have been engaged. All infrastructure partners are required to maintain security standards consistent with or exceeding those described in Section 5 of this Policy.

Section 04

Cookies & Tracking Technologies

gp333.club uses cookies and similar tracking technologies (collectively "cookies") to enable the platform to function correctly, to remember your session and preferences, and to gather anonymous analytics data that helps us improve the site. This section explains what types of cookies we use, what they do, and how you can manage them.

4.1 Strictly Necessary Cookies

These cookies are essential for the gp333 website to operate and cannot be disabled. They include session cookies that maintain your login state while you are navigating the platform, security cookies that protect against cross-site request forgery (CSRF), and load-balancing cookies that ensure your requests are routed to the correct server. No personal data is stored in strictly necessary cookies beyond what is required to maintain your authenticated session.

4.2 Functional Cookies

Functional cookies remember your preferences — such as your chosen language settings and game lobby display options — so that you do not have to re-configure them on each visit. These cookies store only preference data and do not track your activity across other websites.

4.3 Analytics Cookies

gp333 uses anonymised analytics cookies to understand how players interact with gp333.club — which pages are most visited, which game categories are most popular, and where technical errors occur most frequently. Analytics data is aggregated and cannot be used to identify individual players. You may opt out of analytics cookies without affecting your ability to use the platform.

4.4 Managing Cookies

Most web browsers allow you to control cookie behaviour through the browser settings menu. You may choose to block all non-essential cookies, delete existing cookies, or configure your browser to alert you when a cookie is being set. Please be aware that disabling functional or analytics cookies may affect your experience on certain parts of gp333.club. Instructions for managing cookies in popular browsers used in Bangladesh (Chrome for Android, Samsung Internet, Firefox) are available in each browser's help documentation.

Section 05

Data Security

gp333 applies a comprehensive, multi-layered information security programme designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, and destruction. Our security measures are reviewed and updated on a regular basis to reflect evolving threats and best practices in the online gaming industry.

5.1 Encryption

All data in transit between your device and gp333.club is protected by Transport Layer Security (TLS 1.3) with 256-bit AES encryption. Sensitive data stored in our databases — including KYC document references and hashed authentication credentials — is encrypted at rest using industry-standard encryption algorithms. Your account password is never stored in plaintext; it is stored as a salted cryptographic hash.

5.2 Access Controls

Access to systems that hold personal data is restricted to gp333 personnel with a legitimate operational need. Access rights are assigned on a role-based principle of least privilege, are subject to multi-factor authentication, and are reviewed quarterly. All access to production databases is logged, and logs are reviewed regularly by the gp333 security team for anomalous activity.

5.3 Incident Response

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, gp333 will notify the affected players without undue delay and, where practicable, within 72 hours of becoming aware of the breach. Notification will include a description of the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed to address the breach and mitigate its effects.

Section 06

Data Retention

gp333 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods set out below represent the minimum periods for which specific categories of data are retained. Where a legal obligation requires a longer retention period, the longer period applies.

6.1 Active Account Data

While your gp333 account remains open and active, all associated personal data — including registration information, KYC documents, transaction history, and gaming records — is retained in full. This data is necessary for the ongoing operation of your account and for the resolution of any disputes or regulatory enquiries that may arise during the account's lifetime.

6.2 Post-Closure Retention

Following account closure (whether voluntary, enforcement-based, or due to responsible gaming self-exclusion), gp333 retains the following data for the periods stated:

• Financial transaction records and KYC documentation: retained for a minimum of 7 years following account closure, in line with standard financial record-keeping requirements.
• Gaming history and bonus records: retained for 5 years following account closure for dispute resolution and audit purposes.
• Communications and support records: retained for 5 years following account closure.
• Technical and device logs: retained for 12 months from the date of the logged event, unless retained longer in connection with a live fraud investigation.
• Self-exclusion records: retained indefinitely to prevent re-registration during the exclusion period and to support any future responsible gaming review.

6.3 Data Deletion

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised, aggregated data (e.g., statistical analysis of game popularity across all gp333 players) may be retained indefinitely as it no longer constitutes personal data.

Section 07

Your Rights

As a player whose personal data is processed by gp333, you hold a number of rights in relation to that data. gp333 is committed to facilitating the exercise of these rights promptly and without unnecessary obstruction. Requests to exercise any of the rights described in this section should be submitted in writing to [email protected] with the subject line "Data Rights Request" and must include sufficient information to verify your identity before the request is actioned.

7.1 Right of Access

You have the right to request a copy of all personal data that gp333 holds about you. gp333 will provide this information in a structured, commonly used, machine-readable format within 30 calendar days of receiving a verified request. The first copy is provided free of charge; additional copies may be subject to a reasonable administrative fee.

7.2 Right to Rectification

If any personal data that gp333 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Please note that where data accuracy is linked to KYC verification requirements, gp333 may request updated supporting documentation before making the correction.

7.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other lawful basis applies), or where the data has been processed unlawfully. This right is subject to overriding legal obligations — in particular, gp333 cannot delete financial transaction records or KYC documentation that it is required to retain under its regulatory obligations. In such cases, gp333 will inform you of the data that cannot be deleted and the reason why.

7.4 Right to Restrict Processing

You have the right to request that gp333 restricts the processing of your personal data — for example, while the accuracy of data is being contested, or while a request for erasure is being assessed. Where processing is restricted, gp333 will continue to store the data but will not process it for any other purpose without your consent, except for the establishment, exercise, or defence of legal claims.

7.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that gp333 transmit that data directly to another controller where technically feasible.

7.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on gp333's legitimate interests, including direct marketing. Upon receiving a valid objection to direct marketing, gp333 will cease that processing immediately. Objections to other forms of legitimate-interest processing will be assessed against the specific circumstances; gp333 will cease processing unless it demonstrates compelling legitimate grounds that override your rights.

Section 08

Contact & Data Protection

If you have any questions about this Privacy Policy, about how gp333 processes your personal data, or about exercising any of the rights described in Section 7, please contact the gp333 support team using the details below. All data-related enquiries are handled by trained personnel with oversight from our designated Data Protection contact.

8.1 How to Contact Us

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly on gp333.club
• WhatsApp (plain text): +880 1700 000000
• Support Hours: 24/7 — Bangladesh Standard Time (UTC+6)

8.2 Policy Updates

gp333 reserves the right to update this Privacy Policy at any time. The revised version will be published at gp333.club/privacy-policy with an updated effective date at the top of the document. Where changes are material — meaning they significantly affect how your personal data is used or your rights in relation to it — gp333 will notify registered players by email at least 14 days before the changes take effect. Continued use of gp333.club after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms.

8.3 Governing Framework

This Privacy Policy reflects gp333's commitment to data privacy as a core operational value. gp333 applies internationally recognised data protection principles — including purpose limitation, data minimisation, storage limitation, integrity, confidentiality, and accountability — in the management of all personal data processed through gp333.club. gp333 maintains internal records of all processing activities and conducts periodic privacy impact assessments for high-risk processing operations.

This Privacy Policy was last reviewed and updated in January 2026. It supersedes all previous versions of the gp333 Privacy Policy.